$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c94c4bc-cc29-4a10-9ac0-7212e88f2610.roa File: 2c94c4bc-cc29-4a10-9ac0-7212e88f2610.roa (raw, json) Hash identifier: rmmapr0+aMlRDpCd3PML6/wnPymK18z7xGtSOEtMyGU= Subject key identifier: 94:D2:69:7F:D0:4E:1B:7B:CD:9A:95:C3:71:12:98:B5:CA:C6:8C:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37FD41EE4638884C773055D1DAF8415CC8A987A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c94c4bc-cc29-4a10-9ac0-7212e88f2610.roa Signing time: Wed 11 Jun 2025 00:22:07 +0000 ROA not before: Wed 11 Jun 2025 00:22:07 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:fd:41:ee:46:38:88:4c:77:30:55:d1:da:f8:41:5c:c8:a9:87:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 11 00:22:07 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=23908063c4a8f1faed812ae1dc6af4b4ca76cfd240a871c9a7f6d046f0ec6719, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a4:76:16:f5:8f:66:f5:fe:78:d0:08:b4:92: 73:5a:e2:30:5d:25:f0:bd:c2:3c:a6:82:51:3b:bf: 65:c6:58:ca:71:0d:33:fd:21:e6:c1:6d:5d:49:d9: 70:33:bd:10:c9:13:86:ac:71:07:31:dc:69:c0:af: 74:0d:db:e0:29:df:45:49:68:7d:25:82:28:22:95: 79:11:eb:db:7d:ff:70:d0:4e:62:ee:a3:11:b7:16: 0c:62:cb:f6:27:62:03:c8:96:93:66:8f:33:c1:be: e9:ed:af:b4:8d:bd:5d:24:f5:29:27:28:bb:ca:9d: 87:01:90:ba:72:5d:a0:04:db:e4:2c:76:7a:77:7a: 1e:a0:41:f1:3d:b0:10:4a:cb:43:88:b2:67:4a:55: ef:28:4f:49:ae:74:69:20:02:d7:81:fa:c6:5c:a5: 79:b5:21:0a:27:a9:80:35:35:f5:7e:ab:90:ce:bf: 59:15:f8:47:be:29:42:83:e8:df:fb:eb:27:c7:25: 4c:1f:f8:98:21:2a:ab:3e:1e:79:74:a7:61:20:1a: f4:42:0a:51:a7:63:81:50:25:bd:a3:dc:56:e7:80: 7f:5f:0d:ea:f1:6b:f1:8b:b8:76:2a:ff:9b:09:56: 8e:92:6a:b1:ce:b1:b7:e5:c0:9f:2e:ca:aa:10:b9: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D2:69:7F:D0:4E:1B:7B:CD:9A:95:C3:71:12:98:B5:CA:C6:8C:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c94c4bc-cc29-4a10-9ac0-7212e88f2610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:1080::/48 Signature Algorithm: sha256WithRSAEncryption 27:83:d8:25:90:83:bd:66:35:59:4a:94:e8:8b:31:4c:55:23: cb:a4:81:29:39:1b:57:9c:f4:3e:a4:36:31:bb:e7:83:96:4c: 0d:b7:f0:8b:4f:f9:20:77:b9:1c:b5:6c:89:6c:af:87:96:1f: 81:20:20:ef:97:65:82:82:7d:9a:eb:12:3e:3b:40:35:ce:5f: 15:d5:6c:f8:78:b1:82:64:f5:11:c1:4f:7e:a0:6c:d9:b4:42: 39:93:b9:c4:78:37:fe:6d:d8:13:74:1f:95:2b:e5:af:7e:14: 63:76:91:38:d9:83:c7:16:be:d7:04:3e:66:50:11:72:48:af: d1:7d:fd:60:91:47:e6:25:f8:19:c6:a1:59:04:9e:1b:f3:81: 97:95:06:9a:e1:1a:24:f8:b5:99:f9:cf:73:e2:88:b5:35:41: 23:ee:2e:1a:60:c7:8a:03:74:59:ba:d8:0a:5f:cc:7a:e8:37: 37:7d:81:9f:ce:a4:0b:a2:13:2d:69:6f:fa:58:79:d0:b1:5d: 67:97:73:23:c0:c9:e9:7b:a7:b8:62:3c:d6:0d:fa:55:6f:e6: e5:a0:49:e7:48:b9:ac:14:c1:a4:d0:da:09:38:07:24:f6:15: 10:fa:02:00:5f:16:99:3b:f8:05:1b:5d:cf:2e:56:3f:15:11: 37:5c:52:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN/1B7kY4iEx3MFXR2vhBXMiph6MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAyMjA3WhcNMjUwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzkwODA2M2M0YThmMWZhZWQ4MTJhZTFkYzZhZjRiNGNh NzZjZmQyNDBhODcxYzlhN2Y2ZDA0NmYwZWM2NzE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQpHYW9Y9m9f540Ai0knNa4jBdJfC9wjymglE7v2XGWMpx DTP9IebBbV1J2XAzvRDJE4ascQcx3GnAr3QN2+Ap30VJaH0lgigilXkR69t9/3DQ TmLuoxG3Fgxiy/YnYgPIlpNmjzPBvuntr7SNvV0k9SknKLvKnYcBkLpyXaAE2+Qs dnp3eh6gQfE9sBBKy0OIsmdKVe8oT0mudGkgAteB+sZcpXm1IQonqYA1NfV+q5DO v1kV+Ee+KUKD6N/76yfHJUwf+JghKqs+Hnl0p2EgGvRCClGnY4FQJb2j3FbngH9f Derxa/GLuHYq/5sJVo6SarHOsbflwJ8uyqoQuUC1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlNJpf9BOG3vNmpXDcRKYtcrGjHUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjOTRjNGJjLWNjMjktNGExMC05YWMwLTcyMTJlODhmMjYxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//EIAwDQYJKoZIhvcNAQELBQADggEBACeD2CWQg71mNVlKlOiLMUxV I8ukgSk5G1ec9D6kNjG754OWTA238ItP+SB3uRy1bIlsr4eWH4EgIO+XZYKCfZrr Ej47QDXOXxXVbPh4sYJk9RHBT36gbNm0QjmTucR4N/5t2BN0H5Ur5a9+FGN2kTjZ g8cWvtcEPmZQEXJIr9F9/WCRR+Yl+BnGoVkEnhvzgZeVBprhGiT4tZn5z3PiiLU1 QSPuLhpgx4oDdFm62ApfzHroNzd9gZ/OpAuiEy1pb/pYedCxXWeXcyPAyel7p7hi PNYN+lVv5uWgSedIuawUwaTQ2gk4ByT2FRD6AgBfFpk7+AUbXc8uVj8VETdcUso= -----END CERTIFICATE-----Generated at Tue Jul 1 16:09:20 2025 by rpki-client